Ah, that's the thing. It IS pretty damned easy, just currently the law doesn't require ISPs to keep all the relevant data. If it changes and they have to keep all the data on who's sending what where it suddenly totally changes the game. I don't think it will happen, but we can't afford to be blasé about it either.